Debian Security Advisory DSA 759-1 (phppgadmin)

The remote host is missing an update to phppgadmin announced via advisory DSA 759-1. A vulnerability has been discovered in phppgadmin, a set of PHP scripts to administrate PostgreSQL over the WWW, that can lead to disclose sensitive information. Successful exploitation requires that magicquotesg...

Debian Security Advisory DSA 1199-1 (webmin)

The remote host is missing an update to webmin announced via advisory DSA 1199-1. Several vulnerabilities have been identified in webmin, a web-based administration toolkit. CVE-2005-3912 A format string vulnerability in miniserv.pl could allow an attacker to cause a denial of service by crashing...

Debian Security Advisory DSA 720-1 (smartlist)

The remote host is missing an update to smartlist announced via advisory DSA 720-1. OpenVAS Vulnerability Test $Id: deb7201.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 720-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 761-1 (heartbeat)

The remote host is missing an update to heartbeat announced via advisory DSA 761-1. Eric Romang discovered several insecure temporary file creations in heartbeat, the subsystem for High-Availability Linux. For the old stable distribution woody these problems have been fixed in version 0.4.9.0l-7....

Debian Security Advisory DSA 811-1 (common-lisp-controller)

The remote host is missing an update to common-lisp-controller announced via advisory DSA 811-1. Francois-Rene Rideau discovered a bug in common-lisp-controller, a Common Lisp source and compiler manager, that allows a local user to compile malicious code into a cache directory which is executed ...

Debian Security Advisory DSA 927-1 (tkdiff)

The remote host is missing an update to tkdiff announced via advisory DSA 927-1. Javier Fernandez-Sanguino Pena from the Debian Security Audit project discovered that tkdiff, a graphical side by side diff utility, creates temporary files in an insecure fashion. For the old stable distribution woo...

Debian Security Advisory DSA 891-1 (gpsdrive)

The remote host is missing an update to gpsdrive announced via advisory DSA 891-1. Kevin Finisterre discovered a format string vulnerability in gpsdrive, a car navigation system, that can lead to the execution of arbitrary code. The old stable distribution woody does not contain gpsdrive packages...

Debian: Security Advisory (DSA-1207-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-868-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-810-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 890-1 (libungif4)

The remote host is missing an update to libungif4 announced via advisory DSA 890-1. Chris Evans discovered several security related problems in libungif4, a shared library for GIF images. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities: CVE-2005-2974 Null...

Debian: Security Advisory (DSA-958-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 830-1 (ntlmaps)

The remote host is missing an update to ntlmaps announced via advisory DSA 830-1. Drew Parsons noticed that the post-installation script of ntlmaps, an NTLM authorisation proxy server, changes the permissions of the configuration file to be world-readable. It contains the user name and password o...

Debian Security Advisory DSA 866-1 (mozilla)

The remote host is missing an update to mozilla announced via advisory DSA 866-1. Several security-related problems have been discovered in Mozilla and derived programs. For details, please visit the referenced security advisories. OpenVAS Vulnerability Test $Id: deb8661.nasl 6616 2017-07-07...

Aria 0.99-6 - page Local File Inclusion

Aria 0.99-6 - page Local File Inclusion Digital Security Research Group DSecRG Advisory DSECRG-08-002 Application: aria-0.99-6 Web based ERP Versions Affected: aria-0.99-6 Vendor URL: http://www.tucows.net/ Bug: Local File Include Exploits: YES Reported: 09.01.2008 Vendor Response: None Date of...

Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : tomboy vulnerability (USN-560-1)

Jan Oravec discovered that Tomboy did not properly setup the LDLIBRARYPATH environment variable. A local attacker could exploit this to execute arbitrary code as the user invoking the program. Note that Tenable Network Security has extracted the preceding description block directly from the Ubunt...

Linux Mandrake <= 10.2 cdrdao Local Root Exploit (unfixed)

No description provided by source. !/bin/sh cdrdao local root exploit newbug at chroot.org IRC: irc.chroot.org chroot May 2005 echo "cdrdao private exploit" echo "This exploit only for Mandrake series" echo "newbug at chroot.org" echo "May 2005" echo "checking if cdrdao is setuid ..."; if ! -u...

FreeBSD (4.x , < 5.4) master.passwd Disclosure Exploit

No description provided by source. / FreeBSD master.passwd disclosure exploit by kcope in 2005, kingcopeatgmx.net thanks to revoguard just compile and execute .. look into the kmem file it contains the master.passwd tested on unpatched FreeBSD 4.11-RELEASE advisory:...

RunCMS 1.6 - Blind SQL Injection (IDS Evasion)

// / RUNCMS 1.6 BLIND SQL Injection Exploit + IDS evasion / // / exploit get hash of admin password / / / / Exploit is invisible for / / RUNCMS sql injection detecting mechanism / // // / tested on RUNCMS english version 1.6 / // // / Date of Public EXPLOIT: December 25, 2007 / / Written by:...

eSyndiCat Link Exchange Script 2005-2006 SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== eSyndiCat Link Exchange Script 2005-2006 SQL Injection Vulnerability ====================================================================...